Can't reach my Apache server from an external browser and can't get http request from local host RHEL 8

I downloaded httpd on my server and opened port 80 & 443 on iptables to enable connection. HTTPD is enabled and active. But when I run some commands it does not go through.

wget -p http://localhost --2020-04-08 16:17:10-- http://localhost/ Resolving localhost (localhost)... ::1, 127.0.0.1 Connecting to localhost (localhost)|::1|:80... connected. HTTP request sent, awaiting response... 403 Forbidden 2020-04-08 16:17:10 ERROR 403: Forbidden.

$ nmap localhost Starting Nmap 7.70 ( https://nmap.org ) at 2020-04-08 16:31 UTC Nmap scan report for localhost (127.0.0.1) Host is up (0.00070s latency). Other addresses for localhost (not scanned): ::1 Not shown: 997 closed ports PORT STATE SERVICE 22/tcp open ssh 25/tcp open smtp 80/tcp open http

Nmap done: 1 IP address (1 host up) scanned in 0.11 seconds

How can I fix this problem?

๐Ÿ‘︎ 6
๐Ÿ’ฌ︎
๐Ÿ‘ค︎ u/barry12290
๐Ÿ“…︎ Apr 08 2020
๐Ÿšจ︎ report
Flaw in Apache HTTP Server 2.4.17 - 2.4.38 allows anyone you allow to write a script (PHP, CGI,..) to gain root. twitter.com/iamamoose/staโ€ฆ
๐Ÿ‘︎ 141
๐Ÿ’ฌ︎
๐Ÿ‘ค︎ u/_odan
๐Ÿ“…︎ Apr 02 2019
๐Ÿšจ︎ report
Building an HTTP server on a Digital Ocean droplet. Should I run NodeJS with Apache, or use all NodeJS

Another way to ask this question: I know that NodeJS can be an HTTP server, but should it?

Having a hard time finding definitive answers as to best practices. The goal is to host websites and an ExpressJS API.

๐Ÿ‘︎ 11
๐Ÿ’ฌ︎
๐Ÿ‘ค︎ u/IronOhki
๐Ÿ“…︎ Apr 28 2019
๐Ÿšจ︎ report
Optionsbleed - HTTP OPTIONS method can leak Apache's server memory blog.fuzzing-project.org/โ€ฆ
๐Ÿ‘︎ 80
๐Ÿ’ฌ︎
๐Ÿ‘ค︎ u/soda-popper
๐Ÿ“…︎ Sep 18 2017
๐Ÿšจ︎ report
Do not fall for TV Portal's sob-story of "too many people demanding refunds so we are shutting down". The developer used TONS of opensource code, violating every license along the way - including a Modified BSD, BSD-3, Apache, MIT(!?). Oh yeah and this app runs an HTTP Server from your device.

TVPortal has been sketchy from the getgo. But the dev recently released an update saying it was the final release, using the reasoning that too many people were asking for their money back (why would you monetize an app that is specifically for violating DMCA and other copyright laws in the first place?) so he decided to close this project and move on to another one.

My curiosity got the better of me and I decompiled his app to see the code (despite some efforts on the devs part to obfuscate and mess with decompilers).

Essentially, the entire program is a cobbling together of other open source projects. While doing this, he violated their licenses by not reproducing the terms those projects were licensed under.

Here are some projects he copied without credit or reproducing the licensing of the project:

  • https://github.com/NanoHttpd/nanohttpd
  • https://github.com/cfmobile/arca-android
  • https://github.com/pingpongboss/StandOut
  • https://github.com/dinocore1/DevsmartLib-Android
  • https://github.com/johnkil/Android-RobotoTextView
  • https://github.com/fengdai/AlertDialogPro
  • https://github.com/h6ah4i/android-advancedrecyclerview
  • https://github.com/JakeWharton/ProcessPhoenix

I'm sure there's more, I just couldn't be bothered. I don't know this subs policy on uploading decompiled code or jars, so I'll just provide a few screenshots as proof.

http://imgur.com/a/M6xit

And for the cherry on top, a malicious code scan returned these results: http://hastebin.com/igeqofocuv.rb

To be fair, these are just calls to functions that can be/are being used in a way with mal intentions. So it's not like all those hits in the link means it's a virus. Just that it's using functions which have the capacity to be used maliciously.

TL;DR TVPortal is nothing but an app that was "written" by cobbling together other peoples work without giving credit and violates various licenses. Feel no sorrow for developers like this and above all, don't support these kind of practices.

Edit: Ok most of you missed the point entirely and it's my fault for not explicitly spelling it out.

  • There is nothing wrong about using open-source code in your own app, so long as you follow the copyright/licensing of that code.
  • You are not required to give credit to the original code author (though many devs do acknowledge the original author. It's polite to do so, but again, completely optional)

**What the TVPortal dev did that was wrong and quite immoral (a

... keep reading on reddit โžก

๐Ÿ‘︎ 182
๐Ÿ’ฌ︎
๐Ÿ‘ค︎ u/Dr_No_It_All
๐Ÿ“…︎ Apr 01 2016
๐Ÿšจ︎ report
ACME Support (Let's Encrypt) in Apache HTTP Server letsencrypt.org/2017/10/1โ€ฆ
๐Ÿ‘︎ 91
๐Ÿ’ฌ︎
๐Ÿ‘ค︎ u/krakster
๐Ÿ“…︎ Oct 17 2017
๐Ÿšจ︎ report
What file extension to use when running dirBuster against an Apache http server

The NMap scan of a target showing its running Apache httpd service at port 80. I am planning to run OWASP dirbuster against it. One of the inputs you can give to the dirbuster is the File extension. With more experience on the windows side of things, I know for IIS one should be adding file extensions like aspx, asp, etc. What File extension should I add for the Apache service?

๐Ÿ‘︎ 3
๐Ÿ’ฌ︎
๐Ÿ‘ค︎ u/palm_snow
๐Ÿ“…︎ Oct 15 2019
๐Ÿšจ︎ report
ใ€ŒApache HTTP Web Server 2.4ใ€ใซ่ค‡ๆ•ฐใฎ่„†ๅผฑๆ€งใ€ๆœ€ๆ–ฐ็‰ˆใธใฎใ‚ขใƒƒใƒ—ใƒ‡ใƒผใƒˆใ‚’ internet.watch.impress.coโ€ฆ
๐Ÿ‘︎ 10
๐Ÿ’ฌ︎
๐Ÿ‘ค︎ u/momotaneko
๐Ÿ“…︎ Aug 20 2019
๐Ÿšจ︎ report
Optionsbleed - HTTP OPTIONS method can leak Apache's server memory blog.fuzzing-project.org/โ€ฆ
๐Ÿ‘︎ 68
๐Ÿ’ฌ︎
๐Ÿ‘ค︎ u/modelop
๐Ÿ“…︎ Sep 18 2017
๐Ÿšจ︎ report
HTTP Request Smuggling in Apache Traffic Server regilero.github.io/englisโ€ฆ
๐Ÿ‘︎ 4
๐Ÿ’ฌ︎
๐Ÿ‘ค︎ u/albinowax
๐Ÿ“…︎ Sep 19 2019
๐Ÿšจ︎ report
More than 2 million Apache HTTP servers still affected by CVE-2019-0211 flaw securityaffairs.co/wordprโ€ฆ
๐Ÿ‘︎ 6
๐Ÿ’ฌ︎
๐Ÿ‘ค︎ u/quellaman
๐Ÿ“…︎ Apr 05 2019
๐Ÿšจ︎ report
Optionsbleed - HTTP OPTIONS method can leak Apache's server memory blog.fuzzing-project.org/โ€ฆ
๐Ÿ‘︎ 46
๐Ÿ’ฌ︎
๐Ÿ‘ค︎ u/oherrala
๐Ÿ“…︎ Sep 18 2017
๐Ÿšจ︎ report
httpd 2.4 vulnerabilities - The Apache HTTP Server Project httpd.apache.org/securityโ€ฆ
๐Ÿ‘︎ 3
๐Ÿ’ฌ︎
๐Ÿ‘ค︎ u/unixbhaskar
๐Ÿ“…︎ Apr 02 2019
๐Ÿšจ︎ report
Apache Web Server Bug: Local Root Exploit on Apache HTTP Version 2.4.17 to 2.4.38 newcoupons.info/apache-weโ€ฆ
๐Ÿ‘︎ 2
๐Ÿ’ฌ︎
๐Ÿ‘ค︎ u/newcouponsinfo
๐Ÿ“…︎ Apr 08 2019
๐Ÿšจ︎ report
More than 2 million Apache HTTP servers still affected by CVE-2019-0211 flaw securityaffairs.co/wordprโ€ฆ
๐Ÿ‘︎ 2
๐Ÿ’ฌ︎
๐Ÿ‘ค︎ u/fism
๐Ÿ“…︎ Apr 05 2019
๐Ÿšจ︎ report
Optionsbleed - HTTP OPTIONS method can leak Apache's server memory blog.fuzzing-project.org/โ€ฆ
๐Ÿ‘︎ 67
๐Ÿ’ฌ︎
๐Ÿ‘ค︎ u/kutapaki
๐Ÿ“…︎ Sep 19 2017
๐Ÿšจ︎ report
h5ai ยท a modern HTTP web server index for Apache httpd, lighttpd, nginx and Cherokee ยท larsjung.de larsjung.de/h5ai/
๐Ÿ‘︎ 20
๐Ÿ’ฌ︎
๐Ÿ‘ค︎ u/smdion
๐Ÿ“…︎ Jun 24 2015
๐Ÿšจ︎ report
ELI5: Can somebody explain to me how web servers (like Apache) work and what their connection with HTTP is?

Hi guys, I'm trying to make sense of the web is structured, but I'm having difficulties when it comes to HTTP and web servers. I just can't logically see what they do and where we need them for...

Would somebody be able to explain these concepts, maybe with an easy to follow example?

๐Ÿ‘︎ 2
๐Ÿ’ฌ︎
๐Ÿ‘ค︎ u/gytn25
๐Ÿ“…︎ Mar 15 2016
๐Ÿšจ︎ report
Optionsbleed โ€“ HTTP OPTIONS method can leak Apache's server memory blog.fuzzing-project.org/โ€ฆ
๐Ÿ‘︎ 2
๐Ÿ’ฌ︎
๐Ÿ‘ค︎ u/qznc_bot
๐Ÿ“…︎ Sep 18 2017
๐Ÿšจ︎ report
How To Mitigate Slow HTTP DoS Attacks in Apache HTTP Server acunetix.com/blog/articleโ€ฆ
๐Ÿ‘︎ 2
๐Ÿ’ฌ︎
๐Ÿ‘ค︎ u/mikemol
๐Ÿ“…︎ Feb 20 2016
๐Ÿšจ︎ report
Apache HTTP server works great with VLC!

Hi guys, my project for the last few days has been setting up an apache http file server so I can stream files from the pi to my iPad/iPhone/macbook.

I simply configured a http apache server, created a few php and HTML5 pages so that I could upload files to the pi through a web browser (to give it a nicer interface than ssh) and have to say its working great. If you do this, i would recommend giving the pi a static ip address for the purpose of the URL.

To best stream the files, i use VLC on all of my devices. I navigate to the server through the web browser of the device I'm on, and copy the URL to the clipboard. The next bit depends on what device I'm using, but for iPad/iphone I open the vlc app, go to "open network stream" and paste the url. It takes a little time to buffer, but then the file streams, whether its audio or video.

VLC is easy on the mac/linux (and i assume windows) by going to file, then open network, then pasting the url. Again, a bit of buffering and it streams.

Because of the limitations of SD card storage, if anyone plans on doing something similar, i recommend using aliasing in apache and using an external drive.

Overall the project isn't that hard to setup, if anyone is trying to do something similar or needs some help, I'm happy to help!

๐Ÿ‘︎ 2
๐Ÿ’ฌ︎
๐Ÿ‘ค︎ u/The_redditor98
๐Ÿ“…︎ Aug 10 2014
๐Ÿšจ︎ report
/r/android xpost - Do not fall for TV Portal's sob-story of "too many refunds so we are shutting down". The developer used TONS of opensource code, violating every license along the way - including a Modified BSD, BSD-3, Apache, MIT(!?). Oh yeah and this app runs an HTTP Server from your device. reddit.com/r/Android/commโ€ฆ
๐Ÿ‘︎ 9
๐Ÿ’ฌ︎
๐Ÿ‘ค︎ u/Dr_No_It_All
๐Ÿ“…︎ Apr 02 2016
๐Ÿšจ︎ report
Apache HTTP Server 2.2.32 Released mail-archives.apache.org/โ€ฆ
๐Ÿ‘︎ 3
๐Ÿ’ฌ︎
๐Ÿ‘ค︎ u/based2
๐Ÿ“…︎ Jan 15 2017
๐Ÿšจ︎ report
Apache Log4j 0-day in the wild - could affect Server/Portal/GeoEvent Server/etc? cyberkendra.com/2021/12/wโ€ฆ
๐Ÿ‘︎ 3
๐Ÿ’ฌ︎
๐Ÿ‘ค︎ u/a_small_goat
๐Ÿ“…︎ Dec 10 2021
๐Ÿšจ︎ report
Rechecking Apache HTTP Server viva64.com/en/b/0427/
๐Ÿ‘︎ 2
๐Ÿ’ฌ︎
๐Ÿ‘ค︎ u/Resistor510
๐Ÿ“…︎ Sep 06 2016
๐Ÿšจ︎ report
The Final Release of Apache HTTP Server 1.3 apache.org/dist/httpd/Annโ€ฆ
๐Ÿ‘︎ 20
๐Ÿ’ฌ︎
๐Ÿ‘ค︎ u/masta
๐Ÿ“…︎ Feb 03 2010
๐Ÿšจ︎ report
Apache vs Yaws (Erlang http server) sics.se/~joe/apachevsyawsโ€ฆ
๐Ÿ‘︎ 43
๐Ÿ’ฌ︎
๐Ÿ‘ค︎ u/cairoda
๐Ÿ“…︎ Aug 30 2006
๐Ÿšจ︎ report

Please note that this site uses cookies to personalise content and adverts, to provide social media features, and to analyse web traffic. Click here for more information.